Beyond LLMNR/NBNS Spoofing – Exploiting Active Directory-Integrated DNS

Kevin Robertson expands on ADIDNS attacks, covering why WPAD records fail against the global query block list and demonstrating GQBL bypasses with wildcard, DNAME, and NS records.

Kevin Robertson details Inveigh 1.4, his PowerShell LLMNR/mDNS/NBNS spoofer, adding ADIDNS attacks, relay improvements with multiple target handling and BloodHound integration, plus evasion options.

Kubernetes CVE-2020-8554 is a design-level MitM flaw affecting all versions and unpatchable: tenants with routing control can intercept other tenants' traffic, a multi-tenant isolation lesson.

Analyzes leftover domain-validation TXT records across a million domains to fingerprint the online service providers a company uses, releasing a PowerShell script to automate the reconnaissance.

Kevin Robertson details ten attacker rules for MachineAccountQuota, which lets unprivileged users add up to 10 machine accounts, plus Powermad techniques and the defense of setting MAQ to 0.

Karl Fosaaen releases a script for anonymous Azure service enumeration, brute forcing DNS across azurewebsites.net, cloudapp.net, and blob.core.windows.net to map a target's public Azure footprint.